mba66bet Privacy Policy

1. Introduction and Scope

mba66bet ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the mba66bet website, mobile platform, and associated services available at https://mba66bet.co (collectively, "the Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by mba66bet.

This Privacy Policy applies to all users of the mba66bet Platform, including registered members, visitors who browse without registering, and individuals who communicate with us via support channels. It covers all personal data processing activities conducted by mba66bet in connection with the operation of the Platform, including but not limited to account registration, KYC verification, financial transactions, gaming activity, and customer support interactions.

By accessing or using the mba66bet Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the mba66bet Platform immediately.

2. Data Controller Identity

For the purposes of applicable data protection legislation, mba66bet acts as the data controller in respect of personal data collected through the Platform. As data controller, mba66bet determines the purposes and means of processing your personal data. mba66bet operates under international online gaming licensing and is subject to data protection obligations under that licensing framework and applicable regional data protection laws, including the Malaysian Personal Data Protection Act 2010 (PDPA 2010) to the extent applicable to its operations.

All data protection enquiries, data subject requests, and complaints should be directed to the mba66bet Data Protection contact channel as described in Section 15 of this Policy.

3. Personal Data We Collect

mba66bet collects the following categories of personal data in the course of operating the Platform and providing services to members:

Category	Data Types	Purpose
Identity Data	Full name, date of birth, nationality, MyKad / passport number, selfie photograph	KYC verification, age verification, account security
Contact Data	Email address, Malaysian mobile number, residential address	Account communication, 2FA, security alerts, support
Financial Data	Payment method details (e-wallet IDs, bank account numbers, card last-four digits), transaction history, deposit and withdrawal records	Payment processing, AML compliance, fraud prevention
Technical Data	IP address, device identifiers, browser type and version, operating system, session tokens, login timestamps	Platform security, fraud detection, session management
Usage Data	Pages visited, games played, bet history, session duration, feature interactions	Platform improvement, responsible gaming monitoring, personalisation
Communication Data	Live chat transcripts, support email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance

mba66bet does not collect any special categories of personal data (such as health data, racial or ethnic origin, or political opinions) unless specifically required and consented to in the context of responsible gaming support interactions.

4. How We Collect Your Data

mba66bet collects personal data through the following means:

• Direct submission by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or submit any form on the mba66bet Platform;
• Automated technical collection: Through cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the Platform (see Section 9 for details);
• Third-party payment processors: Payment confirmation data and fraud signals from e-wallet providers (Touch n Go eWallet, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank) when you conduct financial transactions;
• Identity verification services: KYC data verification results from third-party identity verification providers used to authenticate your MyKad or passport submission;
• Gaming platform providers: Aggregated technical data from certified game providers integrated into the mba66bet Platform.

5. Purposes and Legal Basis for Processing

mba66bet processes your personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Performance of a contract: Processing necessary to provide you with mba66bet Platform services, including account management, game access, and financial transactions (deposits and withdrawals);
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification requirements, KYC regulations, and record-keeping obligations under our licensing framework;
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, platform abuse detection, improving the Platform, and protecting the rights and interests of mba66bet and its members, where these interests are not overridden by your fundamental rights;
• Consent: Where we rely on your consent for specific processing activities (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Disclosure of Personal Data to Third Parties

mba66bet does not sell, rent, or trade your personal data to third parties for marketing purposes. We may disclose your personal data to the following categories of third parties in the course of operating the Platform:

• Payment processors and e-wallet providers: To facilitate deposit and withdrawal transactions via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other supported payment methods;
• KYC and identity verification providers: Third-party services used to verify your identity documents and age as part of mandatory KYC processes;
• Game content providers: Certified gaming studios and aggregators whose games are integrated into the mba66bet Platform. These providers receive only technical session data necessary to deliver game services;
• Regulatory and licensing authorities: Where disclosure is required by our licensing obligations or in response to lawful requests from competent regulatory bodies;
• Law enforcement and legal proceedings: Where disclosure is required by applicable law, court order, or is necessary to protect the rights, property, or safety of mba66bet, its members, or the public;
• IT infrastructure and cloud service providers: Third-party providers who host, maintain, and secure the technical infrastructure underpinning the mba66bet Platform, operating under strict data processing agreements.

All third parties to whom mba66bet discloses personal data are required to process that data in accordance with applicable data protection laws and mba66bet's data processing requirements. mba66bet does not permit third-party service providers to use your personal data for their own independent purposes.

7. International Data Transfers

mba66bet operates under international online gaming licensing and, in the course of providing services to Malaysian members, may transfer personal data to servers or third-party processors located outside of Malaysia. Where such transfers occur, mba66bet ensures that appropriate safeguards are in place to protect your personal data, including contractual data transfer agreements and compliance with applicable data transfer requirements under the Malaysian Personal Data Protection Act 2010 and our licensing jurisdiction's data protection framework.

If you have questions about the safeguards applied to international data transfers involving your personal data, please contact us using the details in Section 15.

8. Data Retention

mba66bet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and identity data (including KYC records): For the duration of your membership plus a minimum of 5 years following account closure, in compliance with AML and licensing record-keeping requirements;
• Financial transaction records: Minimum 5 years following the date of the transaction, as required by applicable financial record-keeping regulations;
• Technical and usage data: Up to 24 months from the date of collection, or longer where required for fraud investigation or legal proceedings;
• Customer support communications: Up to 3 years from the date of the last interaction, unless required for longer in connection with an active dispute or legal claim.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mba66bet's data destruction procedures.

9. Cookies and Tracking Technologies

The mba66bet Platform uses cookies and similar tracking technologies to improve your browsing experience, maintain session security, and gather usage analytics. The types of cookies used by mba66bet include:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality;
• Analytical cookies: Used to collect anonymised data about how members interact with the mba66bet Platform, enabling us to identify and improve performance issues, popular features, and navigation patterns;
• Functional cookies: Used to remember your preferences (such as language settings and interface preferences) to provide a more personalised experience on return visits.

You may configure your browser settings to refuse cookies or to alert you when cookies are being sent. However, disabling strictly necessary cookies may affect the functionality of the mba66bet Platform, including your ability to log in and maintain an active session.

10. Security of Your Personal Data

mba66bet implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the mba66bet Platform;
• Encrypted storage of sensitive personal data and financial credentials;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) available for all member accounts;
• Automated anomaly detection and real-time monitoring for suspicious login or transaction activity.

While mba66bet takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your mba66bet login credentials. If you suspect that your account has been compromised, contact mba66bet support immediately.

11. Your Rights as a Data Subject

Subject to applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010, you have the following rights in relation to the personal data mba66bet holds about you:

• Right of access: You have the right to request a copy of the personal data mba66bet holds about you;
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where mba66bet no longer has a legal basis or legitimate need to retain it, subject to our legal and regulatory record-keeping obligations;
• Right to restrict processing: You may request that mba66bet restrict the processing of your personal data in certain circumstances;
• Right to data portability: Where processing is based on consent or contract, you may request receipt of your personal data in a commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing;
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes.

To exercise any of the above rights, submit your request to the mba66bet Data Protection contact as described in Section 15. mba66bet will respond to valid requests within 30 days. We may require identity verification before processing your request.

12. Children and Minors

The mba66bet Platform is strictly intended for adults aged 21 years and above. mba66bet does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the mba66bet KYC process, and accounts found to belong to individuals under 21 will be immediately closed and all data deleted in accordance with our data retention policy.

If you are a parent or guardian and believe that a minor has submitted personal data to mba66bet, please contact us immediately using the details in Section 15 so that we can take appropriate action. 21+ only.

13. Links to Third-Party Services

The mba66bet Platform may reference third-party payment providers and game content studios in the course of delivering services. mba66bet is not responsible for the privacy practices of any third-party services. Any interactions you have with third-party payment processors (such as Touch n Go eWallet or Boost) or game providers through the mba66bet Platform are subject to the respective third parties' own privacy policies. mba66bet encourages you to review those policies before providing personal data directly to third-party services.

14. Changes to This Privacy Policy

mba66bet reserves the right to update or modify this Privacy Policy at any time. Material changes to this Policy will be communicated to registered members via the email address on file and/or by a prominent notice on the mba66bet Platform at least 7 days before the revised Policy takes effect, except where immediate changes are required by law or regulatory obligation.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the mba66bet Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We recommend that you review this Policy periodically to stay informed about how mba66bet protects your personal data.

15. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mba66bet, please contact us through the following channels:

• Data Protection Email: [email protected] (plain text — not a clickable link) — subject line: "Privacy / Data Protection Request"
• Live Chat: 24/7 via the chat widget on the mba66bet Platform
• Response Time: Data subject requests are acknowledged within 5 business days and responded to in full within 30 days

If you are not satisfied with mba66bet's response to your data protection concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Malaysian residents, the relevant authority is the Personal Data Protection Commissioner under the Malaysian Communications and Multimedia Commission (MCMC).